Medium
ansible, ansible-core — security advisory
A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.
- Products
- ansible, ansible-core
- Affected versions
- 1.1+dfsg-1, 1.3.4+dfsg-1, 1.4.0+dfsg-1, 1.4.1+dfsg-1, 1.4.3+dfsg-1, 1.4.4+dfsg-1, 1.5.4+dfsg-1, 1.5.4+dfsg-1ubuntu0.1~esm1, 1.5.4+dfsg-1ubuntu0.1~esm2, 1.5.4+dfsg-1ubuntu0.1~esm3, 1.9.2+dfsg-2, 1.9.4-1, 11.2.0+dfsg-1, 12.0.0+dfsg-1, 12.0.0~a2+dfsg-1, 12.0.0~a4+dfsg-1, 12.0.0~a6+dfsg-1, 12.0.0~b1+dfsg-1, 12.2.0+dfsg-1, 13.1.0+dfsg-1, 13.1.0+dfsg-1ubuntu1, 13.4.0+dfsg-1, 2.0.0.2-2, 2.0.0.2-2ubuntu1, 2.0.0.2-2ubuntu1.1, 2.0.0.2-2ubuntu1.2, 2.0.0.2-2ubuntu1.3, 2.0.0.2-2ubuntu1.3+esm1, 2.0.0.2-2ubuntu1.3+esm2, 2.0.0.2-2ubuntu1.3+esm3, 2.0.0.2-2ubuntu1.3+esm4, 2.0.0.2-2ubuntu1.3+esm5, 2.0.0.2-2ubuntu1.3+esm6, 2.10.7+merged+base+2.10.8+dfsg-1, 2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm1, 2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4, 2.12.0-1, 2.12.0-1ubuntu0.1, 2.14.11-1, 2.14.11-2, 2.14.13-1, 2.14.9-2, 2.16.3-0ubuntu1, 2.16.3-0ubuntu2, 2.18.1-4ubuntu1, 2.19.0-1ubuntu1, 2.19.0~beta4-1ubuntu1, 2.19.4-1, 2.20.1-1, 2.21.1~rc1-1, 2.21.1~rc1-2, 2.21.1~rc1-2ubuntu1, 2.22.0~beta2-1, 2.3.1.0+dfsg-2, 2.5.0+dfsg-1, 2.5.1+dfsg-1, 2.5.1+dfsg-1ubuntu0.1, 2.5.1+dfsg-1ubuntu0.1+esm1, 2.5.1+dfsg-1ubuntu0.1+esm2, 2.5.1+dfsg-1ubuntu0.1+esm3, 2.5.1+dfsg-1ubuntu0.1+esm4, 2.5.1+dfsg-1ubuntu0.1+esm5, 2.8.3+dfsg-1, 2.8.6+dfsg-1, 2.9.2+dfsg-1, 2.9.4+dfsg-1, 2.9.6+dfsg-1, 2.9.6+dfsg-1ubuntu0.1~esm1, 2.9.6+dfsg-1ubuntu0.1~esm2, 2.9.6+dfsg-1ubuntu0.1~esm3, 7.7.0+dfsg-1, 7.7.0+dfsg-3, 9.2.0+dfsg-0ubuntu4, 9.2.0+dfsg-0ubuntu5
- Fixed versions
- Not specified
- CVEs
- CVE-2024-11079
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 01:12 UTC · Revision 1
Source evidence
A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.
osv:UBUNTU-CVE-2024-11079
ansible
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible-core
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible-core
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible-core
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible-core
Fixed versions: Not specified
ansible
Fixed versions: Not specified
ansible-core
Fixed versions: Not specified
Complete source record
{
"id": "6c0b200560effdcbe1d50b54319d373c74d68d033f2714f8c2cb618a066511a3",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-11079",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2024-11079",
"summary": "A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playbooks.",
"evidence": "osv:UBUNTU-CVE-2024-11079",
"products": [
{
"name": {
"value": "ansible",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.1+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.3.4+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.4.0+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.4.1+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.4.3+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.4.4+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.5.4+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.5.4+dfsg-1ubuntu0.1~esm1",
"evidence": "/affected/0/versions"
},
{
"value": "1.5.4+dfsg-1ubuntu0.1~esm2",
"evidence": "/affected/0/versions"
},
{
"value": "1.5.4+dfsg-1ubuntu0.1~esm3",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.9.2+dfsg-2",
"evidence": "/affected/1/versions"
},
{
"value": "1.9.4-1",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.1",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.2",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm1",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm2",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm3",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm4",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm5",
"evidence": "/affected/1/versions"
},
{
"value": "2.0.0.2-2ubuntu1.3+esm6",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.1.0+dfsg-2",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.0+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1+esm1",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1+esm2",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1+esm3",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1+esm4",
"evidence": "/affected/2/versions"
},
{
"value": "2.5.1+dfsg-1ubuntu0.1+esm5",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.8.3+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.8.6+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.2+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.4+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.6+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.6+dfsg-1ubuntu0.1~esm1",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.6+dfsg-1ubuntu0.1~esm2",
"evidence": "/affected/3/versions"
},
{
"value": "2.9.6+dfsg-1ubuntu0.1~esm3",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "ansible-core",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.12.0-1",
"evidence": "/affected/4/versions"
},
{
"value": "2.12.0-1ubuntu0.1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.10.7+merged+base+2.10.8+dfsg-1",
"evidence": "/affected/5/versions"
},
{
"value": "2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm1",
"evidence": "/affected/5/versions"
},
{
"value": "2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "7.7.0+dfsg-1",
"evidence": "/affected/6/versions"
},
{
"value": "7.7.0+dfsg-3",
"evidence": "/affected/6/versions"
},
{
"value": "9.2.0+dfsg-0ubuntu4",
"evidence": "/affected/6/versions"
},
{
"value": "9.2.0+dfsg-0ubuntu5",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "ansible-core",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.14.9-2",
"evidence": "/affected/7/versions"
},
{
"value": "2.14.11-1",
"evidence": "/affected/7/versions"
},
{
"value": "2.14.11-2",
"evidence": "/affected/7/versions"
},
{
"value": "2.14.13-1",
"evidence": "/affected/7/versions"
},
{
"value": "2.16.3-0ubuntu1",
"evidence": "/affected/7/versions"
},
{
"value": "2.16.3-0ubuntu2",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "11.2.0+dfsg-1",
"evidence": "/affected/8/versions"
},
{
"value": "12.0.0~a2+dfsg-1",
"evidence": "/affected/8/versions"
},
{
"value": "12.0.0~a4+dfsg-1",
"evidence": "/affected/8/versions"
},
{
"value": "12.0.0~a6+dfsg-1",
"evidence": "/affected/8/versions"
},
{
"value": "12.0.0~b1+dfsg-1",
"evidence": "/affected/8/versions"
}
]
},
{
"name": {
"value": "ansible-core",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.18.1-4ubuntu1",
"evidence": "/affected/9/versions"
},
{
"value": "2.19.0~beta4-1ubuntu1",
"evidence": "/affected/9/versions"
},
{
"value": "2.19.0-1ubuntu1",
"evidence": "/affected/9/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "13.1.0+dfsg-1ubuntu1",
"evidence": "/affected/10/versions"
},
{
"value": "13.4.0+dfsg-1",
"evidence": "/affected/10/versions"
}
]
},
{
"name": {
"value": "ansible-core",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.20.1-1",
"evidence": "/affected/11/versions"
},
{
"value": "2.21.1~rc1-1",
"evidence": "/affected/11/versions"
},
{
"value": "2.21.1~rc1-2",
"evidence": "/affected/11/versions"
},
{
"value": "2.21.1~rc1-2ubuntu1",
"evidence": "/affected/11/versions"
},
{
"value": "2.22.0~beta2-1",
"evidence": "/affected/11/versions"
}
]
},
{
"name": {
"value": "ansible",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "12.0.0~b1+dfsg-1",
"evidence": "/affected/12/versions"
},
{
"value": "12.0.0+dfsg-1",
"evidence": "/affected/12/versions"
},
{
"value": "12.2.0+dfsg-1",
"evidence": "/affected/12/versions"
},
{
"value": "13.1.0+dfsg-1",
"evidence": "/affected/12/versions"
},
{
"value": "13.1.0+dfsg-1ubuntu1",
"evidence": "/affected/12/versions"
}
]
},
{
"name": {
"value": "ansible-core",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.19.0-1ubuntu1",
"evidence": "/affected/13/versions"
},
{
"value": "2.19.4-1",
"evidence": "/affected/13/versions"
},
{
"value": "2.20.1-1",
"evidence": "/affected/13/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2024-11079",
"aliases": [
"UBUNTU-CVE-2024-11079"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L"
},
{
"type": "Ubuntu",
"score": "low"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=esm-infra-legacy%2Ftrusty",
"ecosystem": "Ubuntu:Pro:14.04:LTS"
},
"versions": [
"1.1+dfsg-1",
"1.3.4+dfsg-1",
"1.4.0+dfsg-1",
"1.4.1+dfsg-1",
"1.4.3+dfsg-1",
"1.4.4+dfsg-1",
"1.5.4+dfsg-1",
"1.5.4+dfsg-1ubuntu0.1~esm1",
"1.5.4+dfsg-1ubuntu0.1~esm2",
"1.5.4+dfsg-1ubuntu0.1~esm3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "1.5.4+dfsg-1ubuntu0.1~esm3"
},
{
"binary_name": "ansible-fireball",
"binary_version": "1.5.4+dfsg-1ubuntu0.1~esm3"
},
{
"binary_name": "ansible-node-fireball",
"binary_version": "1.5.4+dfsg-1ubuntu0.1~esm3"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=esm-apps%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"1.9.2+dfsg-2",
"1.9.4-1",
"2.0.0.2-2",
"2.0.0.2-2ubuntu1",
"2.0.0.2-2ubuntu1.1",
"2.0.0.2-2ubuntu1.2",
"2.0.0.2-2ubuntu1.3",
"2.0.0.2-2ubuntu1.3+esm1",
"2.0.0.2-2ubuntu1.3+esm2",
"2.0.0.2-2ubuntu1.3+esm3",
"2.0.0.2-2ubuntu1.3+esm4",
"2.0.0.2-2ubuntu1.3+esm5",
"2.0.0.2-2ubuntu1.3+esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "2.0.0.2-2ubuntu1.3+esm6"
},
{
"binary_name": "ansible-fireball",
"binary_version": "2.0.0.2-2ubuntu1.3+esm6"
},
{
"binary_name": "ansible-node-fireball",
"binary_version": "2.0.0.2-2ubuntu1.3+esm6"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=esm-apps%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2.3.1.0+dfsg-2",
"2.5.0+dfsg-1",
"2.5.1+dfsg-1",
"2.5.1+dfsg-1ubuntu0.1",
"2.5.1+dfsg-1ubuntu0.1+esm1",
"2.5.1+dfsg-1ubuntu0.1+esm2",
"2.5.1+dfsg-1ubuntu0.1+esm3",
"2.5.1+dfsg-1ubuntu0.1+esm4",
"2.5.1+dfsg-1ubuntu0.1+esm5"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "2.5.1+dfsg-1ubuntu0.1+esm5"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=esm-apps%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2.8.3+dfsg-1",
"2.8.6+dfsg-1",
"2.9.2+dfsg-1",
"2.9.4+dfsg-1",
"2.9.6+dfsg-1",
"2.9.6+dfsg-1ubuntu0.1~esm1",
"2.9.6+dfsg-1ubuntu0.1~esm2",
"2.9.6+dfsg-1ubuntu0.1~esm3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "2.9.6+dfsg-1ubuntu0.1~esm3"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible-core",
"purl": "pkg:deb/ubuntu/ansible-core?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.12.0-1",
"2.12.0-1ubuntu0.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible-core",
"binary_version": "2.12.0-1ubuntu0.1"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=esm-apps%2Fjammy",
"ecosystem": "Ubuntu:Pro:22.04:LTS"
},
"versions": [
"2.10.7+merged+base+2.10.8+dfsg-1",
"2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm1",
"2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "2.10.7+merged+base+2.10.8+dfsg-1ubuntu0.1~esm4"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"7.7.0+dfsg-1",
"7.7.0+dfsg-3",
"9.2.0+dfsg-0ubuntu4",
"9.2.0+dfsg-0ubuntu5"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "9.2.0+dfsg-0ubuntu5"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible-core",
"purl": "pkg:deb/ubuntu/ansible-core?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.14.9-2",
"2.14.11-1",
"2.14.11-2",
"2.14.13-1",
"2.16.3-0ubuntu1",
"2.16.3-0ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible-core",
"binary_version": "2.16.3-0ubuntu2"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"11.2.0+dfsg-1",
"12.0.0~a2+dfsg-1",
"12.0.0~a4+dfsg-1",
"12.0.0~a6+dfsg-1",
"12.0.0~b1+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "12.0.0~b1+dfsg-1"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible-core",
"purl": "pkg:deb/ubuntu/ansible-core?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"2.18.1-4ubuntu1",
"2.19.0~beta4-1ubuntu1",
"2.19.0-1ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible-core",
"binary_version": "2.19.0-1ubuntu1"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"13.1.0+dfsg-1ubuntu1",
"13.4.0+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "13.4.0+dfsg-1"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible-core",
"purl": "pkg:deb/ubuntu/ansible-core?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"2.20.1-1",
"2.21.1~rc1-1",
"2.21.1~rc1-2",
"2.21.1~rc1-2ubuntu1",
"2.22.0~beta2-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible-core",
"binary_version": "2.22.0~beta2-1"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible",
"purl": "pkg:deb/ubuntu/ansible?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"12.0.0~b1+dfsg-1",
"12.0.0+dfsg-1",
"12.2.0+dfsg-1",
"13.1.0+dfsg-1",
"13.1.0+dfsg-1ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible",
"binary_version": "13.1.0+dfsg-1ubuntu1"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "ansible-core",
"purl": "pkg:deb/ubuntu/ansible-core?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.19.0-1ubuntu1",
"2.19.4-1",
"2.20.1-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-11079.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ansible-core",
"binary_version": "2.20.1-1"
}
],
"priority_reason": "Upstream rates this as being low severity"
}
}
],
"modified": "2026-10-17T12:56:43.321961578Z",
"provider": "osv",
"upstream": [
"CVE-2024-11079"
],
"references": [
"https://ubuntu.com/security/CVE-2024-11079",
"https://www.cve.org/CVERecord?id=CVE-2024-11079",
"https://access.redhat.com/security/cve/CVE-2024-11079",
"https://bugzilla.redhat.com/show_bug.cgi?id=2325171"
]
},
"related_cves": [
{
"value": "CVE-2024-11079",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 356047,
"published_at": "2024-11-12T00:15:00+00:00"
}